Hexacorn | Blog Can we stop detecting mimikatz please?
Tags
cmtmf-attack-pattern: Network Sniffing
attack-pattern: Data Hooking - T1617 Inter-Process Communication - T1559 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Hooking - T1179 Network Sniffing - T1040 Powershell - T1086 Hooking Network Sniffing
Show in Graph
Common Information
Type Value
UUID abcf5d7d-7fe8-4e75-a7f4-0b57ee36790d
Fingerprint 3e34d9150bc00dda
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 3, 2019, midnight
Added to db Jan. 19, 2023, 12:12 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline UNKNOWN
Title Hexacorn | Blog Can we stop detecting mimikatz please?
Detected Hints/Tags/Attributes 18/2/6
Source URLs
Redirection Url
Details Source http://www.hexacorn.com/blog/2019/02/03/can-we-stop-detecting-mimikatz-please/
URL Provider
Details Provider Source level domain
Details hexacorn.com www.hexacorn.com
Attributes
Details Type #Events CTI Value
Details Domain 107 
system.management
Details File 478 
lsass.exe
Details File 1122 
svchost.exe
Details File 15 
mimilib.dll
Details File 8 
winscard.dll
Details File 14 
samlib.dll